Sign-up

ID

VAR-201804-1207


CVE

CVE-2018-4093


TITLE

plural Apple Vulnerability in the kernel component of the product that bypasses memory read restrictions

Trust: 0.8

sources: JVNDB: JVNDB-2018-003724

DESCRIPTION

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a crafted app. plural Apple A vulnerability exists in the product kernel component that bypasses memory read restrictions.An attacker could bypass the memory read limit through a crafted application. Apple iOS/WatchOS/tvOS/macOS are prone to multiple security vulnerabilities. An attacker can exploit these issues to execute arbitrary code with kernel or system privileges, gain sensitive information, bypass security restrictions and perform unauthorized actions and or cause a denial-of-service condition. Apple iOS, macOS High Sierra, tvOS, and watchOS are all products of Apple Inc. in the United States. Apple iOS is an operating system developed for mobile devices; macOS High Sierra is a dedicated operating system developed for Mac computers; tvOS is a smart TV operating system. watchOS is a smart watch operating system. The following products and versions are affected: Apple iOS prior to 11.2.5; macOS High Sierra prior to 10.13.3; watchOS prior to 4.2.2; tvOS prior to 11.2.5. MacOS sysctl_default_netsvctype_to_dscp_map and sysctl_dscp_to_wifi_ac_map stack leak through struct padding CVE-2018-4093 The sysctls net.qos.default_netsvctype_to_dscp_map and net.qos.dscp_to_wifi_ac_map, implemented in sysctl_default_netsvctype_to_dscp_map() and sysctl_dscp_to_wifi_ac_map(), write arrays of elements of type `struct netsvctype_dscp_map` from the stack to userspace. This struct type contains padding bytes: /* * Network Service Type to DiffServ Code Point mapping */ struct netsvctype_dscp_map { int netsvctype; u_int8_t dscp; /* 6 bits diffserv code point */ /* 3 bytes padding */ }; This issue was discovered using an AFL-based fuzzer, loosely based on TriforceAFL. These are the debug log diffs with different stack poison values (0xcc and 0xdd): #### TESTCASE 'id:012874,src:012831,op:arith16,pos:30,val:be:+34,+cov' [...] loaded 68 bytes fuzzdata [...] syscall(rax=0x600020000ca, args=[0x3, 0x3, 0x3, 0xea800f00000069, 0x10003, 0x0]); rsp=0x7ffee8bc9da8 USER READ: addr 0x3, size 8, value 0x0000007200000004 USER READ: addr 0xb, size 1, value 0x65 USER READ: addr 0xc, size 1, value 0x00 USER READ: addr 0xd, size 1, value 0x00 USER READ: addr 0xe, size 1, value 0x00 -USER WRITE: addr 0x3, size 8, value 0xcccccc0000000000 -USER WRITE: addr 0xb, size 8, value 0xcccccc0a00000001 -USER WRITE: addr 0x13, size 8, value 0xcccccc1800000002 -USER WRITE: addr 0x1b, size 8, value 0xcccccc2200000003 -USER WRITE: addr 0x23, size 8, value 0xcccccc2e00000004 -USER WRITE: addr 0x2b, size 8, value 0xcccccc2000000005 -USER WRITE: addr 0x33, size 8, value 0xcccccc1a00000006 -USER WRITE: addr 0x3b, size 8, value 0xcccccc1000000007 -USER WRITE: addr 0x43, size 8, value 0xcccccc1200000008 +USER WRITE: addr 0x3, size 8, value 0xdddddd0000000000 +USER WRITE: addr 0xb, size 8, value 0xdddddd0a00000001 +USER WRITE: addr 0x13, size 8, value 0xdddddd1800000002 +USER WRITE: addr 0x1b, size 8, value 0xdddddd2200000003 +USER WRITE: addr 0x23, size 8, value 0xdddddd2e00000004 +USER WRITE: addr 0x2b, size 8, value 0xdddddd2000000005 +USER WRITE: addr 0x33, size 8, value 0xdddddd1a00000006 +USER WRITE: addr 0x3b, size 8, value 0xdddddd1000000007 +USER WRITE: addr 0x43, size 8, value 0xdddddd1200000008 sysret OUT OF FUZZER INPUT DATA - REWINDING REWIND STATS: 1/sec REWIND! (trigger_exception=0x10006; cycles=550) #### TESTCASE 'id:012903,src:012873,op:arith16,pos:30,val:be:+34,+cov' loaded 68 bytes fuzzdata [...] syscall(rax=0x600020000ca, args=[0x3, 0x3, 0x3, 0xea800f00000069, 0x10003, 0x0]); rsp=0x7ffee8bc9da8 USER READ: addr 0x3, size 8, value 0x0000007200000004 USER READ: addr 0xb, size 1, value 0x66 USER READ: addr 0xc, size 1, value 0x00 USER READ: addr 0xd, size 1, value 0x00 USER READ: addr 0xe, size 1, value 0x00 timeout bump -USER WRITE: addr 0x3, size 8, value 0xcccccc0000000000 -USER WRITE: addr 0xb, size 8, value 0xcccccc0100000000 -USER WRITE: addr 0x13, size 8, value 0xcccccc0200000000 -USER WRITE: addr 0x1b, size 8, value 0xcccccc0300000000 -USER WRITE: addr 0x23, size 8, value 0xcccccc0400000000 -USER WRITE: addr 0x2b, size 8, value 0xcccccc0500000000 -USER WRITE: addr 0x33, size 8, value 0xcccccc0600000000 -USER WRITE: addr 0x3b, size 8, value 0xcccccc0700000000 -USER WRITE: addr 0x43, size 8, value 0xcccccc08000000c8 -USER WRITE: addr 0x4b, size 8, value 0xcccccc09000000c8 -USER WRITE: addr 0x53, size 8, value 0xcccccc0a000000c8 -USER WRITE: addr 0x5b, size 8, value 0xcccccc0b000000c8 -USER WRITE: addr 0x63, size 8, value 0xcccccc0c000000c8 -USER WRITE: addr 0x6b, size 8, value 0xcccccc0d000000c8 -USER WRITE: addr 0x73, size 8, value 0xcccccc0e000000c8 -USER WRITE: addr 0x7b, size 8, value 0xcccccc0f000000c8 -USER WRITE: addr 0x83, size 8, value 0xcccccc10000000c8 -USER WRITE: addr 0x8b, size 8, value 0xcccccc11000000c8 -USER WRITE: addr 0x93, size 8, value 0xcccccc12000000c8 -USER WRITE: addr 0x9b, size 8, value 0xcccccc13000000c8 -USER WRITE: addr 0xa3, size 8, value 0xcccccc14000000c8 -USER WRITE: addr 0xab, size 8, value 0xcccccc15000000c8 -USER WRITE: addr 0xb3, size 8, value 0xcccccc16000000c8 -USER WRITE: addr 0xbb, size 8, value 0xcccccc17000000c8 -USER WRITE: addr 0xc3, size 8, value 0xcccccc1800000000 -USER WRITE: addr 0xcb, size 8, value 0xcccccc1900000000 -USER WRITE: addr 0xd3, size 8, value 0xcccccc1a00000000 -USER WRITE: addr 0xdb, size 8, value 0xcccccc1b00000000 -USER WRITE: addr 0xe3, size 8, value 0xcccccc1c00000000 -USER WRITE: addr 0xeb, size 8, value 0xcccccc1d00000000 -USER WRITE: addr 0xf3, size 8, value 0xcccccc1e00000000 -USER WRITE: addr 0xfb, size 8, value 0xcccccc1f00000000 -USER WRITE: addr 0x103, size 8, value 0xcccccc20000002bc -USER WRITE: addr 0x10b, size 8, value 0xcccccc21000002bc -USER WRITE: addr 0x113, size 8, value 0xcccccc22000002bc -USER WRITE: addr 0x11b, size 8, value 0xcccccc23000002bc -USER WRITE: addr 0x123, size 8, value 0xcccccc24000002bc -USER WRITE: addr 0x12b, size 8, value 0xcccccc25000002bc -USER WRITE: addr 0x133, size 8, value 0xcccccc26000002bc -USER WRITE: addr 0x13b, size 8, value 0xcccccc27000002bc -USER WRITE: addr 0x143, size 8, value 0xcccccc28000002bc -USER WRITE: addr 0x14b, size 8, value 0xcccccc29000002bc -USER WRITE: addr 0x153, size 8, value 0xcccccc2a000002bc -USER WRITE: addr 0x15b, size 8, value 0xcccccc2b000002bc -USER WRITE: addr 0x163, size 8, value 0xcccccc2c000002bc -USER WRITE: addr 0x16b, size 8, value 0xcccccc2d000002bc -USER WRITE: addr 0x173, size 8, value 0xcccccc2e000002bc -USER WRITE: addr 0x17b, size 8, value 0xcccccc2f000002bc -USER WRITE: addr 0x183, size 8, value 0xcccccc3000000320 -USER WRITE: addr 0x18b, size 8, value 0xcccccc3100000320 -USER WRITE: addr 0x193, size 8, value 0xcccccc3200000320 -USER WRITE: addr 0x19b, size 8, value 0xcccccc3300000320 -USER WRITE: addr 0x1a3, size 8, value 0xcccccc3400000320 -USER WRITE: addr 0x1ab, size 8, value 0xcccccc3500000320 -USER WRITE: addr 0x1b3, size 8, value 0xcccccc3600000320 -USER WRITE: addr 0x1bb, size 8, value 0xcccccc3700000320 -USER WRITE: addr 0x1c3, size 8, value 0xcccccc3800000320 -USER WRITE: addr 0x1cb, size 8, value 0xcccccc3900000320 -USER WRITE: addr 0x1d3, size 8, value 0xcccccc3a00000320 -USER WRITE: addr 0x1db, size 8, value 0xcccccc3b00000320 -USER WRITE: addr 0x1e3, size 8, value 0xcccccc3c00000320 -USER WRITE: addr 0x1eb, size 8, value 0xcccccc3d00000320 -USER WRITE: addr 0x1f3, size 8, value 0xcccccc3e00000320 -USER WRITE: addr 0x1fb, size 8, value 0xcccccc3f00000320 +USER WRITE: addr 0x3, size 8, value 0xdddddd0000000000 +USER WRITE: addr 0xb, size 8, value 0xdddddd0100000000 +USER WRITE: addr 0x13, size 8, value 0xdddddd0200000000 +USER WRITE: addr 0x1b, size 8, value 0xdddddd0300000000 +USER WRITE: addr 0x23, size 8, value 0xdddddd0400000000 +USER WRITE: addr 0x2b, size 8, value 0xdddddd0500000000 +USER WRITE: addr 0x33, size 8, value 0xdddddd0600000000 +USER WRITE: addr 0x3b, size 8, value 0xdddddd0700000000 +USER WRITE: addr 0x43, size 8, value 0xdddddd08000000c8 +USER WRITE: addr 0x4b, size 8, value 0xdddddd09000000c8 +USER WRITE: addr 0x53, size 8, value 0xdddddd0a000000c8 +USER WRITE: addr 0x5b, size 8, value 0xdddddd0b000000c8 +USER WRITE: addr 0x63, size 8, value 0xdddddd0c000000c8 +USER WRITE: addr 0x6b, size 8, value 0xdddddd0d000000c8 +USER WRITE: addr 0x73, size 8, value 0xdddddd0e000000c8 +USER WRITE: addr 0x7b, size 8, value 0xdddddd0f000000c8 +USER WRITE: addr 0x83, size 8, value 0xdddddd10000000c8 +USER WRITE: addr 0x8b, size 8, value 0xdddddd11000000c8 +USER WRITE: addr 0x93, size 8, value 0xdddddd12000000c8 +USER WRITE: addr 0x9b, size 8, value 0xdddddd13000000c8 +USER WRITE: addr 0xa3, size 8, value 0xdddddd14000000c8 +USER WRITE: addr 0xab, size 8, value 0xdddddd15000000c8 +USER WRITE: addr 0xb3, size 8, value 0xdddddd16000000c8 +USER WRITE: addr 0xbb, size 8, value 0xdddddd17000000c8 +USER WRITE: addr 0xc3, size 8, value 0xdddddd1800000000 +USER WRITE: addr 0xcb, size 8, value 0xdddddd1900000000 +USER WRITE: addr 0xd3, size 8, value 0xdddddd1a00000000 +USER WRITE: addr 0xdb, size 8, value 0xdddddd1b00000000 +USER WRITE: addr 0xe3, size 8, value 0xdddddd1c00000000 +USER WRITE: addr 0xeb, size 8, value 0xdddddd1d00000000 +USER WRITE: addr 0xf3, size 8, value 0xdddddd1e00000000 +USER WRITE: addr 0xfb, size 8, value 0xdddddd1f00000000 +USER WRITE: addr 0x103, size 8, value 0xdddddd20000002bc +USER WRITE: addr 0x10b, size 8, value 0xdddddd21000002bc +USER WRITE: addr 0x113, size 8, value 0xdddddd22000002bc +USER WRITE: addr 0x11b, size 8, value 0xdddddd23000002bc +USER WRITE: addr 0x123, size 8, value 0xdddddd24000002bc +USER WRITE: addr 0x12b, size 8, value 0xdddddd25000002bc +USER WRITE: addr 0x133, size 8, value 0xdddddd26000002bc +USER WRITE: addr 0x13b, size 8, value 0xdddddd27000002bc +USER WRITE: addr 0x143, size 8, value 0xdddddd28000002bc +USER WRITE: addr 0x14b, size 8, value 0xdddddd29000002bc +USER WRITE: addr 0x153, size 8, value 0xdddddd2a000002bc +USER WRITE: addr 0x15b, size 8, value 0xdddddd2b000002bc +USER WRITE: addr 0x163, size 8, value 0xdddddd2c000002bc +USER WRITE: addr 0x16b, size 8, value 0xdddddd2d000002bc +USER WRITE: addr 0x173, size 8, value 0xdddddd2e000002bc +USER WRITE: addr 0x17b, size 8, value 0xdddddd2f000002bc +USER WRITE: addr 0x183, size 8, value 0xdddddd3000000320 +USER WRITE: addr 0x18b, size 8, value 0xdddddd3100000320 +USER WRITE: addr 0x193, size 8, value 0xdddddd3200000320 +USER WRITE: addr 0x19b, size 8, value 0xdddddd3300000320 +USER WRITE: addr 0x1a3, size 8, value 0xdddddd3400000320 +USER WRITE: addr 0x1ab, size 8, value 0xdddddd3500000320 +USER WRITE: addr 0x1b3, size 8, value 0xdddddd3600000320 +USER WRITE: addr 0x1bb, size 8, value 0xdddddd3700000320 +USER WRITE: addr 0x1c3, size 8, value 0xdddddd3800000320 +USER WRITE: addr 0x1cb, size 8, value 0xdddddd3900000320 +USER WRITE: addr 0x1d3, size 8, value 0xdddddd3a00000320 +USER WRITE: addr 0x1db, size 8, value 0xdddddd3b00000320 +USER WRITE: addr 0x1e3, size 8, value 0xdddddd3c00000320 +USER WRITE: addr 0x1eb, size 8, value 0xdddddd3d00000320 +USER WRITE: addr 0x1f3, size 8, value 0xdddddd3e00000320 +USER WRITE: addr 0x1fb, size 8, value 0xdddddd3f00000320 sysret OUT OF FUZZER INPUT DATA - REWINDING REWIND! (trigger_exception=0x10006; cycles=32) Verified on a Macmini7,1 running macOS 10.13 (17A405), Darwin 17.0.0: $ sysctl -x net.qos.default_netsvctype_to_dscp_map net.qos.default_netsvctype_to_dscp_map: Format:S Length:72 Dump:0x0000000000000000010000000a00000002000000187f00000300000022ffffff040000002e0000000500000020ffffff060000001affffff07000000100000000800000012000000 $ sysctl -x net.qos.dscp_to_wifi_ac_map net.qos.dscp_to_wifi_ac_map: Format:S Length:512 Dump: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 This bug is subject to a 90 day disclosure deadline. After 90 days elapse or a patch has been made broadly available, the bug report will become visible to the public. Found by: jannh . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 APPLE-SA-2018-1-23-1 iOS 11.2.5 iOS 11.2.5 is now available and addresses the following: Audio Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted audio file may lead to arbitrary code execution Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4094: Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University Core Bluetooth Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2018-4087: Rani Idan (@raniXCH) of Zimperium zLabs Team CVE-2018-4095: Rani Idan (@raniXCH) of Zimperium zLabs Team Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4090: Jann Horn of Google Project Zero Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A race condition was addressed through improved locking. CVE-2018-4092: an anonymous researcher Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A malicious application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed through improved input validation. CVE-2018-4082: Russ Cox of Google Kernel Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2018-4093: Jann Horn of Google Project Zero LinkPresentation Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing a maliciously crafted text message may lead to application denial of service Description: A resource exhaustion issue was addressed through improved input validation. CVE-2018-4100: Abraham Masri (@cheesecakeufo) QuartzCore Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue existed in the processing of web content. This issue was addressed through improved input validation. CVE-2018-4085: Ret2 Systems Inc. working with Trend Micro's Zero Day Initiative Security Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: A certificate may have name constraints applied incorrectly Description: A certificate evaluation issue existed in the handling of name constraints. This issue was addressed through improved trust evaluation of certificates. CVE-2018-4086: Ian Haken of Netflix WebKit Available for: iPhone 5s and later, iPad Air and later, and iPod touch 6th generation Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2018-4088: Jeonghoon Shin of Theori CVE-2018-4089: Ivan Fratric of Google Project Zero CVE-2018-4096: found by OSS-Fuzz Installation note: This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "11.2.5". Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCgBHFiEEcuX4rtoRe4X62yWlg6PvjDRstEYFAlpng6cpHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQg6PvjDRstEbJVxAA y2gRrvCCEzescN0fgqNk8zIGqaiFRKXYEyuaHMgXjrJIh8OlBgLb3pegU6MFfTsv SjNLDKvPIOW/2vV8ilS6ot32DB4VTANjHKCWTs3jmJrQlWh2VZKvPnzyOiQ0zK2g Btt4+1ZYipRuCyWkf0oatW9JHsCscVexzERyczywBdEzx1mCnCF4N3uOYU0T3Nx2 7Wz92GnvTAnJWjlCJEK1wq/YCntEFhssBVmsWQU1LVPFHoh8uPa87iE/+P1t0CY1 IQLloYmPoX9GIS/CB7XAsEsz3RquE8n/DigSvsApkrl6Judv/HgCYe5GJcwIIemi 1RyNXtj3/+CVZYSwC2Fo/CSyph1M+td79Klqy4gdCVt0KnlmwkKhSexhuQsKn68A /WTcOK7aidcdVuQpjUJAc3pJunl0zHg5bCJRzrb2NdFEoYT0V+kxLEKGlOWRLhXv NSn9+f7pMykSCbfo9U9HkYm68JDtN/WANMCJccF66iQYjEhg0Rgok3oKhNOhakwH HDYunzqF2dEql4WiAKiEAHwVVQ5gJtjDWest6s6UW58fiT2fxufaJav5gczv/wmy km/doFT9+BKmRXygwXdR6P3oRFhZmeLVvjtKpfjPzuIvHkwS7wlOw3aWnZ0rMijm pp7WyqEojXjOxyZjTeBM3A7ssxIuO5BoLtIHgT4GSNg= =F6+9 -----END PGP SIGNATURE----- . CVE-2018-4098: Siguza Kernel Available for: macOS Sierra 10.12.6, OS X El Capitan 10.11.6 Impact: An application may be able to read kernel memory (Meltdown) Description: Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache. CVE-2017-5754: Jann Horn of Google Project Zero; Moritz Lipp of Graz University of Technology; Michael Schwarz of Graz University of Technology; Daniel Gruss of Graz University of Technology; Thomas Prescher of Cyberus Technology GmbH; Werner Haas of Cyberus Technology GmbH; Stefan Mangard of Graz University of Technology; Paul Kocher; Daniel Genkin of University of Pennsylvania and University of Maryland; Yuval Yarom of University of Adelaide and Data61; and Mike Hamburg of Rambus (Cryptography Research Division) Kernel Available for: macOS High Sierra 10.13.2 Impact: An application may be able to read restricted memory Description: A memory initialization issue was addressed through improved memory handling. CVE-2018-4097: Resecurity, Inc. Alternatively, on your watch, select "My Watch > General > About"

Trust: 2.52

sources: NVD: CVE-2018-4093 // JVNDB: JVNDB-2018-003724 // BID: 102782 // VULHUB: VHN-134124 // VULMON: CVE-2018-4093 // PACKETSTORM: 146139 // PACKETSTORM: 146066 // PACKETSTORM: 146067 // PACKETSTORM: 146082 // PACKETSTORM: 146083

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.13.3

Trust: 1.0

vendor:applemodel:tvscope:ltversion:11.2.5

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:11.2.5

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:4.2.2

Trust: 1.0

vendor:applemodel:watchosscope:eqversion:3.1.3

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:4.1

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:3.2.2

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:3.2.3

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:2.2.1

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:3.2

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:3.1.1

Trust: 0.9

vendor:applemodel:watchosscope:eqversion:3.1

Trust: 0.9

vendor:applemodel:mac os xscope:eqversion:10.13.2

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (ipad air or later )

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (iphone 5s or later )

Trust: 0.8

vendor:applemodel:iosscope:ltversion:11.2.5 (ipod touch first 6 generation )

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:11.2.5 (apple tv 4k)

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:11.2.5 (apple tv first 4 generation )

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:4.2.2 (apple watch all models )

Trust: 0.8

vendor:applemodel:watchosscope:eqversion:4.0

Trust: 0.6

vendor:applemodel:watchosscope:eqversion:4.0.1

Trust: 0.6

vendor:applemodel:iosscope:eqversion:30

Trust: 0.3

vendor:applemodel:tvosscope:neversion:11.2.5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.3.2

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.2.2

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.8

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4

Trust: 0.3

vendor:applemodel:watchscope:eqversion:0

Trust: 0.3

vendor:applemodel:iosscope:eqversion:11.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.0.2

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:2.0

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:3.0

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:11.2.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.1.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.1.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.4

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.1.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.3

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.2.2

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:2.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.10

Trust: 0.3

vendor:applemodel:iosscope:eqversion:2.1

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.4

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.4

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.1.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:3.0

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.1

Trust: 0.3

vendor:applemodel:ipod touchscope:eqversion:0

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:40

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.1.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:11.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:3.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.3.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.1.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.4

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3.5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.1

Trust: 0.3

vendor:applemodel:watchosscope:neversion:4.2.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.0.2

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.4.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:11.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.1

Trust: 0.3

vendor:applemodel:macosscope:neversion:10.13.3

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.1

Trust: 0.3

vendor:applemodel:tvscope:eqversion:0

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:1.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.3.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.6

Trust: 0.3

vendor:applemodel:iosscope:eqversion:50

Trust: 0.3

vendor:applemodel:iosscope:eqversion:5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.9

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:2.0

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.1.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.1.4

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.2.1

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:4

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:3

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:5.1

Trust: 0.3

vendor:applemodel:iphonescope:eqversion:0

Trust: 0.3

vendor:applemodel:security update el capitanscope:neversion:2018-0010

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:10.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3.4

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.5

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3.5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.1.1

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:11

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:1.0

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:3.2.1

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.7

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.3

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.6

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3.2

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:11.1

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:2.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.2

Trust: 0.3

vendor:applemodel:ipadscope:eqversion:0

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:2.1

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.2

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:5.1.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:5.0.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.1

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.5

Trust: 0.3

vendor:applemodel:iosscope:neversion:11.2.5

Trust: 0.3

vendor:applemodel:security update sierrascope:neversion:2018-0010

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:10.1.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:11.2.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:3.2.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.1.6

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3.4

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.0.1

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:2.2.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:6.0.2

Trust: 0.3

vendor:applemodel:watchosscope:eqversion:4.2

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:3.2.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:9.3.2

Trust: 0.3

vendor:applemodel:mac osscope:eqversion:x10.8.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.5

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.3.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:8.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:10.3.3

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:3.2

Trust: 0.3

vendor:applemodel:iosscope:eqversion:11.1

Trust: 0.3

vendor:applemodel:iosscope:eqversion:4.2.6

Trust: 0.3

vendor:applemodel:tvosscope:eqversion:9.0

Trust: 0.3

vendor:applemodel:iosscope:eqversion:7.0.1

Trust: 0.3

sources: BID: 102782 // JVNDB: JVNDB-2018-003724 // CNNVD: CNNVD-201801-1102 // NVD: CVE-2018-4093

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2018-4093
value: MEDIUM

Trust: 1.0

NVD: CVE-2018-4093
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201801-1102
value: MEDIUM

Trust: 0.6

VULHUB: VHN-134124
value: MEDIUM

Trust: 0.1

VULMON: CVE-2018-4093
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2018-4093
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-134124
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2018-4093
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.0

Trust: 1.8

sources: VULHUB: VHN-134124 // VULMON: CVE-2018-4093 // JVNDB: JVNDB-2018-003724 // CNNVD: CNNVD-201801-1102 // NVD: CVE-2018-4093

PROBLEMTYPE DATA

problemtype:CWE-200

Trust: 1.9

sources: VULHUB: VHN-134124 // JVNDB: JVNDB-2018-003724 // NVD: CVE-2018-4093

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201801-1102

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201801-1102

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2018-003724

PATCH
title:HT208462url:https://support.apple.com/en-us/HT208462
Trust: 0.8
title:HT208463url:https://support.apple.com/en-us/HT208463
Trust: 0.8
title:HT208464url:https://support.apple.com/en-us/HT208464
Trust: 0.8
title:HT208465url:https://support.apple.com/en-us/HT208465
Trust: 0.8
title:HT208462url:https://support.apple.com/ja-jp/HT208462
Trust: 0.8
title:HT208463url:https://support.apple.com/ja-jp/HT208463
Trust: 0.8
title:HT208464url:https://support.apple.com/ja-jp/HT208464
Trust: 0.8
title:HT208465url:https://support.apple.com/ja-jp/HT208465
Trust: 0.8
title:Multiple Apple product Kernel Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=78174
Trust: 0.6
title:The Registerurl:https://www.theregister.co.uk/2018/01/24/apple_ios_macos_patches/
Trust: 0.2
sources:
            
            
            VULMON: CVE-2018-4093 // 
            
            
            
            JVNDB: JVNDB-2018-003724 // 
            
            
            
            CNNVD: CNNVD-201801-1102

EXTERNAL IDS
db:NVDid:CVE-2018-4093
Trust: 3.4
db:BIDid:102782
Trust: 2.1
db:SECTRACKid:1040267
Trust: 1.2
db:SECTRACKid:1040265
Trust: 1.2
db:JVNid:JVNVU99446427
Trust: 0.8
db:JVNDBid:JVNDB-2018-003724
Trust: 0.8
db:CNNVDid:CNNVD-201801-1102
Trust: 0.7
db:PACKETSTORMid:146139
Trust: 0.2
db:VULHUBid:VHN-134124
Trust: 0.1
db:VULMONid:CVE-2018-4093
Trust: 0.1
db:PACKETSTORMid:146066
Trust: 0.1
db:PACKETSTORMid:146067
Trust: 0.1
db:PACKETSTORMid:146082
Trust: 0.1
db:PACKETSTORMid:146083
Trust: 0.1
sources:
            
            
            VULHUB: VHN-134124 // 
            
            
            
            VULMON: CVE-2018-4093 // 
            
            
            
            BID: 102782 // 
            
            
            
            JVNDB: JVNDB-2018-003724 // 
            
            
            
            PACKETSTORM: 146139 // 
            
            
            
            PACKETSTORM: 146066 // 
            
            
            
            PACKETSTORM: 146067 // 
            
            
            
            PACKETSTORM: 146082 // 
            
            
            
            PACKETSTORM: 146083 // 
            
            
            
            CNNVD: CNNVD-201801-1102 // 
            
            
            
            NVD: CVE-2018-4093

REFERENCES
url:http://www.securityfocus.com/bid/102782
Trust: 1.9
url:https://support.apple.com/ht208462
Trust: 1.8
url:https://support.apple.com/ht208463
Trust: 1.8
url:https://support.apple.com/ht208464
Trust: 1.8
url:https://support.apple.com/ht208465
Trust: 1.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-4093
Trust: 1.3
url:http://www.securitytracker.com/id/1040265
Trust: 1.2
url:http://www.securitytracker.com/id/1040267
Trust: 1.2
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2018-4093
Trust: 0.8
url:http://jvn.jp/vu/jvnvu99446427/index.html
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2018-4085
Trust: 0.4
url:https://support.apple.com/kb/ht201222
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4094
Trust: 0.4
url:https://www.apple.com/support/security/pgp/
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4096
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4086
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4088
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4090
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4082
Trust: 0.4
url:https://nvd.nist.gov/vuln/detail/cve-2018-4092
Trust: 0.4
url:https://www.apple.com/
Trust: 0.3
url:http://www.apple.com/ios/
Trust: 0.3
url:http://www.apple.com/accessibility/tvos/
Trust: 0.3
url:http://www.apple.com/watchos-2/
Trust: 0.3
url:https://lists.apple.com/archives/security-announce/2018/jan/msg00000.html
Trust: 0.3
url:https://lists.apple.com/archives/security-announce/2018/jan/msg00001.html
Trust: 0.3
url:https://lists.apple.com/archives/security-announce/2018/jan/msg00002.html
Trust: 0.3
url:https://lists.apple.com/archives/security-announce/2018/jan/msg00003.html
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4087
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4095
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4100
Trust: 0.3
url:https://nvd.nist.gov/vuln/detail/cve-2018-4089
Trust: 0.3
url:https://cwe.mitre.org/data/definitions/200.html
Trust: 0.1
url:https://nvd.nist.gov
Trust: 0.1
url:https://www.theregister.co.uk/2018/01/24/apple_ios_macos_patches/
Trust: 0.1
url:https://tools.cisco.com/security/center/viewalert.x?alertid=56559
Trust: 0.1
url:https://www.apple.com/itunes/
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-4097
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-4084
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-8817
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-4098
Trust: 0.1
url:https://support.apple.com/downloads/
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2018-4091
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2017-5754
Trust: 0.1
url:https://support.apple.com/kb/ht204641
Trust: 0.1
sources:
            
            
            VULHUB: VHN-134124 // 
            
            
            
            VULMON: CVE-2018-4093 // 
            
            
            
            BID: 102782 // 
            
            
            
            JVNDB: JVNDB-2018-003724 // 
            
            
            
            PACKETSTORM: 146139 // 
            
            
            
            PACKETSTORM: 146066 // 
            
            
            
            PACKETSTORM: 146067 // 
            
            
            
            PACKETSTORM: 146082 // 
            
            
            
            PACKETSTORM: 146083 // 
            
            
            
            CNNVD: CNNVD-201801-1102 // 
            
            
            
            NVD: CVE-2018-4093

CREDITS
Mingi Cho, MinSik Shin, Seoyoung Kim, Yeongho Lee and Taekyoung Kwon of the Information Security Lab, Yonsei University,Jann Horn of Google Project Zero, an anonymous researcher, Russ Cox of Google, Jann Horn of Google Project Zero, Ret2 Systems Inc. work
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201801-1102

SOURCES
db:VULHUBid:VHN-134124
db:VULMONid:CVE-2018-4093
db:BIDid:102782
db:JVNDBid:JVNDB-2018-003724
db:PACKETSTORMid:146139
db:PACKETSTORMid:146066
db:PACKETSTORMid:146067
db:PACKETSTORMid:146082
db:PACKETSTORMid:146083
db:CNNVDid:CNNVD-201801-1102
db:NVDid:CVE-2018-4093

LAST UPDATE DATE
2024-11-23T19:52:02.437000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-134124date:2018-04-27T00:00:00
db:VULMONid:CVE-2018-4093date:2018-04-27T00:00:00
db:BIDid:102782date:2018-01-23T00:00:00
db:JVNDBid:JVNDB-2018-003724date:2018-06-04T00:00:00
db:CNNVDid:CNNVD-201801-1102date:2018-01-31T00:00:00
db:NVDid:CVE-2018-4093date:2024-11-21T04:06:45.167

SOURCES RELEASE DATE
db:VULHUBid:VHN-134124date:2018-04-03T00:00:00
db:VULMONid:CVE-2018-4093date:2018-04-03T00:00:00
db:BIDid:102782date:2018-01-23T00:00:00
db:JVNDBid:JVNDB-2018-003724date:2018-06-04T00:00:00
db:PACKETSTORMid:146139date:2018-01-27T12:12:12
db:PACKETSTORMid:146066date:2018-01-24T16:56:42
db:PACKETSTORMid:146067date:2018-01-24T16:59:41
db:PACKETSTORMid:146082date:2018-01-25T01:49:38
db:PACKETSTORMid:146083date:2018-01-25T01:50:55
db:CNNVDid:CNNVD-201801-1102date:2018-01-31T00:00:00
db:NVDid:CVE-2018-4093date:2018-04-03T06:29:03.517